Vulnerabilities > Davidvongries
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-21 | CVE-2023-50828 | Cross-site Scripting vulnerability in Davidvongries Ultimate Dashboard Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Vongries Ultimate Dashboard – Custom WordPress Dashboard allows Stored XSS.This issue affects Ultimate Dashboard – Custom WordPress Dashboard: from n/a through 3.7.11. | 4.8 |
| 2023-11-22 | CVE-2023-4726 | Cross-site Scripting vulnerability in Davidvongries Ultimate Dashboard The Ultimate Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.7.7. | 4.8 |